Packagist/hybridauth/hybridauth CVE-2026-4587: low 3.7, EPSS 0.27%
HybridAuth Has Improper SSL Certificate Validation in Curl HTTP Client
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.12.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r3hf-q3mf-7h6w
- https://nvd.nist.gov/vuln/detail/CVE-2026-4587
- https://github.com/hybridauth/hybridauth/issues/1444
- https://github.com/hybridauth/hybridauth
- https://vuldb.com/?ctiid.352423
- https://vuldb.com/?id.352423
- https://vuldb.com/?submit.775463
CVE-2026-4587 · published · modified · JSON